Proofpoint buys Varonis for $6.3B to merge email security with data access controls

Proofpoint Inc. has agreed to acquire Varonis Systems Inc. for approximately $6.3 billion in an all-cash transaction, the companies announced on Thursday. This move concludes months of market speculation regarding the future of the data security firm, which had been fielding interest from several private equity groups since June, according to SiliconANGLE.

What is the financial structure of this deal?

Proofpoint is paying $49.75 per share for Varonis. This valuation represents a 52% premium compared to Varonis’ stock price before reports of potential buyer interest emerged in June. The transaction is the largest acquisition Proofpoint has undertaken since Thoma Bravo took the cybersecurity company private for $12.3 billion in 2021.

How do the product portfolios align?

Varonis specializes in data mapping and access controls, originally founded in 2005 to track file permissions on corporate servers. Proofpoint intends to integrate these capabilities with its existing email, collaboration, and data loss prevention products. The goal is to create a unified platform that addresses risks associated with AI agents accessing sensitive enterprise information, according to Proofpoint CEO Sumit Dhawan.

What is the operational impact for customers?

The combined entity will serve more than 16,000 enterprises. Proofpoint plans to move quickly to integrate product lines and sales teams after the deal closes. Varonis recently expanded its own portfolio by acquiring phishing detection company SlashNext Inc. in September 2025, further bridging the gap between data security and email threat protection.

Who is driving the sale process?

A committee of independent Varonis directors managed the sale process, contacting a range of strategic and financial buyers. Varonis CEO Yaki Faitelson stated that the deal offers a better outcome for shareholders than the company’s standalone plan, once risks are considered.

Questions to ask your suppliers

Security operations teams should verify how this merger affects existing support contracts and service level agreements. Confirm whether data residency requirements remain unchanged during the integration phase. Ask if there will be temporary disruptions to API connections or management consoles. Inform legal and procurement departments about potential changes to master service agreements. Ensure that escalation paths for critical security incidents are clearly documented and tested before any technical migrations begin.

Background: Data residency

Data residency is the requirement that digital information remains stored within specific geographic boundaries. These rules exist to satisfy local laws or organizational policies. You must configure cloud storage to prevent data from moving across borders. This control limits where your backups and active records physically sit.

Read the full guide: What Is Data Residency: How Location Rules Protect Your Cloud

What to do and how to stay safe: Proofpoint

• Review current support contracts with Varonis and Proofpoint to identify clauses related to mergers and acquisitions.
• Verify that data access controls and audit logs remain intact and accessible during any platform integration.
• Monitor vendor communications for changes to API endpoints or authentication methods that could affect automated workflows.
• Confirm that incident response contacts and escalation procedures are updated to reflect the new organizational structure.

Step-by-step guide: Phishing Prevention Checklist for Technical Defenses

General security guidance from the TechSec Feed newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

How much is Proofpoint paying for Varonis?

Proofpoint is paying approximately $6.3 billion in cash, which equates to $49.75 per share.

When did the acquisition agreement become public?

The companies announced the agreement on Thursday, according to reports from Reuters and SiliconANGLE.

Will Varonis continue to operate independently?

Proofpoint intends to integrate Varonis’ products and sales teams with its own platforms after the deal closes.